CVE-2008-2468

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-09-18 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.

Affected products

Landesk Management Suite: through 8.8; 8.7
Landesk Security Suite: through 8.8; 8.7
Landesk Server Manager: through 8.8; 8.7

References

http://community.landesk.com/support/docs/DOC-3276
http://dvlabs.tippingpoint.com/advisory/TPTI-08-06
http://secunia.com/advisories/31888
http://securityreason.com/securityalert/4269
http://www.kb.cert.org/vuls/id/538011
http://www.securityfocus.com/archive/1/496369/100/0/threaded
http://www.securityfocus.com/bid/31193
http://www.securitytracker.com/id?1020888
http://www.vupen.com/english/advisories/2008/2588
https://exchange.xforce.ibmcloud.com/vulnerabilities/45154
http://community.landesk.com/support/docs/DOC-3276
http://dvlabs.tippingpoint.com/advisory/TPTI-08-06

Get alerted when CVE-2008-2468 or the next vulnerability affects your stack